Skip to content

io.github.craigmbrown/blindoracle

by craigmbrown · remote · no sign-in to list tools · v2.0.4 · published by GitHub user craigmbrown

Trust + counterparty-risk layer for x402 A2A trades: reputation, pre-hire check, escrow, disputes

Changes · 38
CompareRegistry entry

39 tools: 38 change things and 1 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http blindoracle https://api.craigmbrown.com/v2/?src=mcp_official_registry

Findings

Matches of fixed checks, with the text they matched.

2 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

39 tools

Changes things 38Claude Code: ask
  • agent.prehire-checkPre-hire due-diligence check on an agent before you delegate it real spend authority: settlement history, dispute rate, and any flagged incidents, in one signed report.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Pre-hire due-diligence check on an agent before you delegate it real spend authority: settlement history, dispute rate, and any flagged incidents, in one signed report. (x402: $0.25 USDC per call)
  • agent.trust-badge$0.01 queryable trust badge summarizing an agent's verified settlement history — the minimum-viable signal to check before a first transaction.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    $0.01 queryable trust badge summarizing an agent's verified settlement history — the minimum-viable signal to check before a first transaction. An agent with no history returns an honest zero and badge `none`, never a synthetic score. (x402: $0.01 USDC per call)
  • arbitration.dispute-settlementAdjudication of a contested deliverable: both sides submit evidence and a signed verdict (upheld / overturned / withdrawn; ProofOfAdjudicatedOutcome 30129) is written to the settle…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Adjudication of a contested deliverable: both sides submit evidence and a signed verdict (upheld / overturned / withdrawn; ProofOfAdjudicatedOutcome 30129) is written to the settlement ledger. Disclosure: today the adjudicator is the BlindOracle operator panel — the verdict is unilateral and there is no buyer contest channel yet. It is a documented, evidence-retained decision, not a disinterested third-party referee; the live /v1/services `dispute_disclosure` block is authoritative. No charge if the required source cannot be fetched. (x402: $5.00 USDC per call)
  • attestation.single-use-sealA single-use cryptographic seal proving a specific deliverable was produced by a specific agent at a specific time and has not been altered since — the receipt a counterparty can i…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    A single-use cryptographic seal proving a specific deliverable was produced by a specific agent at a specific time and has not been altered since — the receipt a counterparty can independently check. (x402: $0.05 USDC per call)
  • content.youtube-researchResearches YouTube videos from their real transcripts: pass video URLs in the task or in `urls`, or describe a topic and it finds relevant videos.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Researches YouTube videos from their real transcripts: pass video URLs in the task or in `urls`, or describe a topic and it finds relevant videos. Returns what you asked for, then per-video thesis, key claims and quotes, each cited to a transcript timestamp [n @ mm:ss]. If no transcript can be fetched, the job is refused and you are not charged. Refuses, with no charge, when fetched transcript cannot be fetched. (x402: $0.03 USDC per call)
  • crypto.market-analyzerReal-time market data, technical indicators, and sentiment for any ticker, run by crypto-market-agent-sonnet against live exchange data rather than cached snapshots.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Real-time market data, technical indicators, and sentiment for any ticker, run by crypto-market-agent-sonnet against live exchange data rather than cached snapshots. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Broader single-ticker view than any one oracle.* SKU; feeds crypto.investment-plays' risk scoring. May deliver with a first-line DEGRADED notice when live data is unavailable. (x402: $0.02 USDC per call)
  • data.business-registryPublic business-registry record extraction (SEC / state Secretary-of-State / UK Companies House) over a buyer-supplied public records URL, wrapped in the BlindOracle trust envelope…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Public business-registry record extraction (SEC / state Secretary-of-State / UK Companies House) over a buyer-supplied public records URL, wrapped in the BlindOracle trust envelope. Public records only. (x402: $0.10 USDC per call)
  • data.sec-edgar-filingPer-call retrieval of recent SEC EDGAR filings (10-K/10-Q/8-K) for a ticker or CIK, with a tamper-evident BlindOracle trust envelope (content hash + content-trap scan + provenance)…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Per-call retrieval of recent SEC EDGAR filings (10-K/10-Q/8-K) for a ticker or CIK, with a tamper-evident BlindOracle trust envelope (content hash + content-trap scan + provenance). Public-domain source. (x402: $0.05 USDC per call)
  • data.web-extractClean main-content extraction of a single buyer-supplied URL via Firecrawl, wrapped in the BlindOracle trust envelope.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Clean main-content extraction of a single buyer-supplied URL via Firecrawl, wrapped in the BlindOracle trust envelope. Thin extraction tool; no data inventory held. (x402: $0.05 USDC per call)
  • deliberation.multi-agent-debate5-11 agent panel debate with 11 LLM models, structured voting, forced decision-making May deliver with a first-line DEGRADED notice when buyer question is unavailable.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    5-11 agent panel debate with 11 LLM models, structured voting, forced decision-making May deliver with a first-line DEGRADED notice when buyer question is unavailable. (x402: $2.00 USDC per call)
  • finops.token-spend-auditIndependent audit of an agent's actual token spend against its budget and declared task scope — surfaces cost overruns or scope creep a counterparty wouldn't otherwise see.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Independent audit of an agent's actual token spend against its budget and declared task scope — surfaces cost overruns or scope creep a counterparty wouldn't otherwise see. (x402: $0.05 USDC per call)
  • health_checkCheck BlindOracle service health and API statusNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check BlindOracle service health and API status
  • ops.due-diligence-scanAutomated DD scan: financials, litigation, key personnel, IP, media sentiment, red flags Refuses, with no charge, when ≥5 web sources + registry/EDGAR lookups cannot be fetched.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Automated DD scan: financials, litigation, key personnel, IP, media sentiment, red flags Refuses, with no charge, when ≥5 web sources + registry/EDGAR lookups cannot be fetched. Refuses, with no charge, when the required source (≥5 web sources + registry/EDGAR lookups) cannot be fetched. (x402: $1.00 USDC per call)
  • oracle.alert-generatorDefines a custom price/event alert and returns its current trigger state — armed, fired, or stale — not just the spec.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Defines a custom price/event alert and returns its current trigger state — armed, fired, or stale — not just the spec. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Reads off oracle.volatility-monitor and oracle.price-feed; this SKU is the trigger layer, not the data layer. Refuses, with no charge, when live price + buyer threshold fields cannot be fetched. (x402: $0.02 USDC per call)
  • oracle.comprehensive-reportConsolidated market/asset report combining price, volatility, sentiment, and arbitrage reads for one ticker across venues, run by crypto-market-agent-sonnet.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Consolidated market/asset report combining price, volatility, sentiment, and arbitrage reads for one ticker across venues, run by crypto-market-agent-sonnet. Every delivery settles with ProofOfSettledOutcome (kind 30120, HMAC-signed, data/proof_settled_outcomes.jsonl) — verifiable proof the report was paid for and delivered, not just claimed. Broader scope than any single oracle.* SKU below; narrower and cheaper than security.massat-audit's compliance-grade evidence. May deliver with a first-line DEGRADED notice when live data is unavailable. (x402: $0.20 USDC per call)
  • oracle.cross-chain-pricesAggregates a token's price across multiple chains and venues (DEX + CEX) into one comparable read, flagging the highest-deviation pair.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Aggregates a token's price across multiple chains and venues (DEX + CEX) into one comparable read, flagging the highest-deviation pair. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Narrower than oracle.comprehensive-report (single metric, not a full report); feeds oracle.market-arbitrage's spread detection. Refuses, with no charge, when live price feed, ≥2 chains cannot be fetched. (x402: $0.03 USDC per call)
  • oracle.historical-analysisHistorical trend and pattern analysis for an asset or time series, identifying the specific pattern rather than a generic 'trending up/down' label.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Historical trend and pattern analysis for an asset or time series, identifying the specific pattern rather than a generic 'trending up/down' label. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Feeds crypto.investment-plays' entry/exit logic; distinct from oracle.volatility-monitor's real-time (not historical) read. Refuses, with no charge, when price history ≥30d cannot be fetched. (x402: $0.08 USDC per call)
  • oracle.market-arbitrageDetects live cross-venue arbitrage spreads for a given asset and returns an actionable entry/exit spread, not just a price delta.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Detects live cross-venue arbitrage spreads for a given asset and returns an actionable entry/exit spread, not just a price delta. Built on oracle.cross-chain-prices' price aggregation. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Pairs with crypto.investment-plays for a full execution plan. Refuses, with no charge, when live prices from ≥2 venues cannot be fetched. (x402: $0.10 USDC per call)
  • oracle.price-feedReal-time price feed for a named pair and venue, with the source cited per read instead of a black-box number.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Real-time price feed for a named pair and venue, with the source cited per read instead of a black-box number. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). The base data layer the other oracle.* SKUs (arbitrage, volatility, alerts) are built on. Refuses, with no charge, when live price feed cannot be fetched. Refuses, with no charge, when the required source (live price feed) cannot be fetched. (x402: $0.02 USDC per call)
  • oracle.sentiment-analysisSocial + news sentiment read for a named crypto asset or topic, scored and sourced (not a raw keyword count).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Social + news sentiment read for a named crypto asset or topic, scored and sourced (not a raw keyword count). Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Same sentiment methodology as research.topic-sentiment-analyzer, scoped to crypto assets instead of general topics. May deliver with a first-line DEGRADED notice when live data is unavailable. (x402: $0.06 USDC per call)
  • oracle.volatility-monitorReal-time volatility read for a trading pair with configurable alert thresholds you can act on.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Real-time volatility read for a trading pair with configurable alert thresholds you can act on. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Complements oracle.alert-generator (fires the alert) and oracle.historical-analysis (explains the trend behind the number). Refuses, with no charge, when live price history cannot be fetched. Refuses, with no charge, when the required source (live price history) cannot be fetched. (x402: $0.04 USDC per call)
  • prediction.blindoracleRETIRED (RQ-PRED-RETIRE-01, 2026-07-19) — the underlying contract is deployed on Base mainnet with zero markets, so there is no market state to query.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    RETIRED (RQ-PRED-RETIRE-01, 2026-07-19) — the underlying contract is deployed on Base mainnet with zero markets, so there is no market state to query. Priced at 0.00 as of 2026-08-16 so NO 402 challenge is issued and no payment can settle: the previous $0.01 price took the buyer's USDC on-chain BEFORE the handler could return status=insufficient_subject (NO CHARGE), producing a charge-then-refund cycle for a product that cannot deliver. Kept listed for catalog completeness. See specs/decision-retire-prediction-markets.md (x402: $0.00 USDC per call)
  • procurement.council5-11 agent panel debate playing CFO + CIO + CISO + Procurement Lead.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    5-11 agent panel debate playing CFO + CIO + CISO + Procurement Lead. Forced vote on any vendor decision. Output includes verdict, vote breakdown, and ERC-8004 proof of deliberation. Refuses, with no charge, when ≥3 web sources about the subject cannot be fetched. Refuses, with no charge, when the required source (≥3 web sources about the subject) cannot be fetched. (x402: $2.00 USDC per call)
  • procurement.trust-layerSigned, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `subject`): passport status, audit-report count (ProofOfAuditReport 3010…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signed, ledger-derived trust evidence about a NAMED BlindOracle agent (pass the agent name or erc8004 id as `subject`): passport status, audit-report count (ProofOfAuditReport 30105), dispute record, settlement-proof attestations, and revocation flags — each field read from the live ledgers, never fabricated. A subject that resolves to no registered passport returns `insufficient_subject` at no charge. It does NOT research external companies; use procurement.vendor-vetting or ops.due-diligence-scan for that. (x402: $0.01 USDC per call)
  • procurement.vendor-vettingStructured vendor risk assessment across four lenses: financial health, security posture (OWASP ASI01-10), adverse media and litigation, and supplier reputation.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Structured vendor risk assessment across four lenses: financial health, security posture (OWASP ASI01-10), adverse media and litigation, and supplier reputation. Returns a 0-10 risk score, per-category findings, and red flags. Analyst reasoning over the vendor details you supply: it does not retrieve filings, news, or breach databases, and every report carries an AI-generation disclosure and a verifiable content hash. For an automated audit of a live agent system, see security.massat-audit. Refuses, with no charge, when ≥5 web sources incl. vendor's published terms cannot be fetched. (x402: $99.00 USDC per call)
  • research.topic-deep-researcherStructured research brief (exec summary, mechanisms, alternatives, risks, [n] citations) synthesized over live web search results plus any `urls` you supply — each supplied URL is …No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Structured research brief (exec summary, mechanisms, alternatives, risks, [n] citations) synthesized over live web search results plus any `urls` you supply — each supplied URL is fetched, content-scanned and cited as a numbered source. It is a $0.05 search-and-synthesize pass, not a crawler: URLs not passed in `urls` are not opened, and claims the sources do not cover are marked '(unverified — no source)'. Settlement proof: ProofOfSettledOutcome (kind 30120). Deeper than research.topic-news-scanner; web + supplied documents vs content.youtube-research's video-only pool. Refuses, with no charge, when ≥5 fetched web sources cannot be fetched. (x402: $0.05 USDC per call)
  • research.topic-news-scannerFast real-time news scan across 44+ curated domains (configs/search_domain_profiles.json), every item source-attributed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Fast real-time news scan across 44+ curated domains (configs/search_domain_profiles.json), every item source-attributed. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). The quick-scan tier below research.topic-deep-researcher's slower, citation-grade report. Refuses, with no charge, when ≥3 fetched web sources cannot be fetched. Refuses, with no charge, when the required source (≥3 fetched web sources) cannot be fetched. (x402: $0.02 USDC per call)
  • research.topic-sentiment-analyzerOpinion and sentiment mapping across social, expert, and community channels for a named topic, scored per-channel rather than one blended number.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Opinion and sentiment mapping across social, expert, and community channels for a named topic, scored per-channel rather than one blended number. Settlement proof: ProofOfSettledOutcome (kind 30120, data/proof_settled_outcomes.jsonl). Same methodology as oracle.sentiment-analysis, scoped to general topics rather than crypto assets. Refuses, with no charge, when ≥3 fetched web sources cannot be fetched. Refuses, with no charge, when the required source (≥3 fetched web sources) cannot be fetched. (x402: $0.03 USDC per call)
  • security.audit-attestationNeutral third-party notarization of an AI audit result: we did not run the audit, we attest that a specified audit was performed and its findings match what's claimed — the credent…1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...its findings match what's claimed — the credential a checkpoint can trust without re-runni..."

      What this check looks for
    Description, as the server wrote it
    Neutral third-party notarization of an AI audit result: we did not run the audit, we attest that a specified audit was performed and its findings match what's claimed — the credential a checkpoint can trust without re-running the audit itself. (x402: $0.50 USDC per call)
  • security.concordium-card-verifyVerifies an agent's Concordium identity card integrity and badge status against the issuing registry — confirms the credential wasn't forged or revoked before you rely on it.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...nst the issuing registry — confirms the credential wasn't forged or revoked before you rel..."

      What this check looks for
    Description, as the server wrote it
    Verifies an agent's Concordium identity card integrity and badge status against the issuing registry — confirms the credential wasn't forged or revoked before you rely on it. (x402: $0.02 USDC per call)
  • security.enterprise-audit13-agent coordinated security audit producing a signed ProofOfAuditReport, Merkle-anchored to Base, for enterprises that need documented evidence an agent fleet was assessed before…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    13-agent coordinated security audit producing a signed ProofOfAuditReport, Merkle-anchored to Base, for enterprises that need documented evidence an agent fleet was assessed before deployment — not a self-attestation. Refuses, with no charge, when the required source (buyer target) cannot be fetched. (x402: $25.00 USDC per call)
  • security.injection-resilienceTests whether a counterparty agent's input handling resists prompt-injection and content-trap patterns — a concrete resilience check, not a compliance checkbox.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Tests whether a counterparty agent's input handling resists prompt-injection and content-trap patterns — a concrete resilience check, not a compliance checkbox. (x402: $0.50 USDC per call)
  • security.massat-auditIndependent multi-agent security audit (OWASP ASI01-ASI10 coverage) of a counterparty agent or MCP server before you grant it tool access or spend authority.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Independent multi-agent security audit (OWASP ASI01-ASI10 coverage) of a counterparty agent or MCP server before you grant it tool access or spend authority. Findings are Merkle-committed and the audit report is signed. (x402: $5.00 USDC per call)
  • security.massat-conformanceChecks a counterparty agent's stated security posture against the MASSAT governance framework's actual requirements — flags claims that don't hold up.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Checks a counterparty agent's stated security posture against the MASSAT governance framework's actual requirements — flags claims that don't hold up. (x402: $0.25 USDC per call)
  • security.process-attestationSigned attestation that a specific process was followed (not just that an outcome occurred) — useful when a counterparty needs evidence of *how* something was done, not only *that*…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Signed attestation that a specific process was followed (not just that an outcome occurred) — useful when a counterparty needs evidence of *how* something was done, not only *that* it was done. (x402: $0.25 USDC per call)
  • translation.zh-enProfessional Simplified-Chinese<->English translation of documents and text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Professional Simplified-Chinese<->English translation of documents and text. Auto-detects direction, preserves formatting, names, and numbers. Offshore/PIPL-guarded (refuses mainland-CN data subjects). BO trust envelope (content hash + scan + provenance) on every deliverable. (x402: $0.05 USDC per call)
  • trust.receipt-verifyVerify a BlindOracle receipt against the parts a buyer cannot check alone: is the proof_id really in BlindOracle's append-only proof rail, does its payload still hash to the stored…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Verify a BlindOracle receipt against the parts a buyer cannot check alone: is the proof_id really in BlindOracle's append-only proof rail, does its payload still hash to the stored row, and does the row's HMAC-SHA256 verify against the signing key. Also recomputes content_sha256 and confirms the Base payment, so one call is a complete answer. Deterministic, no LLM. The self-checkable half is free forever in the published verify-blindoracle-receipt skill (RQ-BO-RECEIPT-VERIFY-01). (x402: $0.01 USDC per call)
Only reads 1Claude Code: allow
  • reputation.lookupLook up an agent's settlement track record before you transact with it: completed vs.No findings

    Why it is in this group

    • The name "reputation.lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Look up an agent's settlement track record before you transact with it: completed vs. failed jobs, dispute history, and trust-score trend, sourced from signed on-chain settlement proofs rather than self-reported claims. (x402: $0.01 USDC per call)

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 2.0.4. Values in angle brackets are yours to fill in.

claude mcp add --transport http blindoracle https://api.craigmbrown.com/v2/?src=mcp_official_registry

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__blindoracle__reputation_lookup"
    ],
    "ask": [
      "mcp__blindoracle__health_check",
      "mcp__blindoracle__agent_prehire-check",
      "mcp__blindoracle__agent_trust-badge",
      "mcp__blindoracle__arbitration_dispute-settlement",
      "mcp__blindoracle__attestation_single-use-seal",
      "mcp__blindoracle__content_youtube-research",
      "mcp__blindoracle__crypto_market-analyzer",
      "mcp__blindoracle__data_business-registry",
      "mcp__blindoracle__data_sec-edgar-filing",
      "mcp__blindoracle__data_web-extract",
      "mcp__blindoracle__deliberation_multi-agent-debate",
      "mcp__blindoracle__finops_token-spend-audit",
      "mcp__blindoracle__ops_due-diligence-scan",
      "mcp__blindoracle__ops_link-integrity",
      "mcp__blindoracle__oracle_alert-generator",
      "mcp__blindoracle__oracle_comprehensive-report",
      "mcp__blindoracle__oracle_cross-chain-prices",
      "mcp__blindoracle__oracle_historical-analysis",
      "mcp__blindoracle__oracle_market-arbitrage",
      "mcp__blindoracle__oracle_price-feed",
      "mcp__blindoracle__oracle_sentiment-analysis",
      "mcp__blindoracle__oracle_volatility-monitor",
      "mcp__blindoracle__prediction_blindoracle",
      "mcp__blindoracle__procurement_council",
      "mcp__blindoracle__procurement_trust-layer",
      "mcp__blindoracle__procurement_vendor-vetting",
      "mcp__blindoracle__research_topic-deep-researcher",
      "mcp__blindoracle__research_topic-news-scanner",
      "mcp__blindoracle__research_topic-sentiment-analyzer",
      "mcp__blindoracle__security_audit-attestation",
      "mcp__blindoracle__security_concordium-card-verify",
      "mcp__blindoracle__security_enterprise-audit",
      "mcp__blindoracle__security_injection-resilience",
      "mcp__blindoracle__security_massat-audit",
      "mcp__blindoracle__security_massat-conformance",
      "mcp__blindoracle__security_process-attestation",
      "mcp__blindoracle__translation_zh-en",
      "mcp__blindoracle__trust_receipt-verify"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as blindoracle. Review it before you use it.